One map for the cybersecurity blog.

Threat intelligence tradecraft, actor research, telecom threat mapping, attribution, infrastructure pivoting, ATT&CK, and CTI-to-detection work.

• The Intelligent Shield. OpenCTI
• Customer-Driven AI CTI Project Template. Part 1: Foundations
• Customer-Driven AI CTI Project Template. Part 2A: Phase-by-Phase Execution Guide
• Customer-Driven AI CTI Project Template: Part 2B - Reference Toolkit
• Applying Sherman Kent’s Analytic Discipline to CTI
• CTI-Led Defensive Strategy for a Cellular Provider
• Manual CTI vs. AI-Assisted CTI
• ATT&CK as a Working Tool
• Attribution Methodology
• Infrastructure Pivoting

Big-picture AI security, HexStrike-AI setup, MCP/Cursor workflows, Gemini/OpenAI/Llama configuration, and productivity frameworks.

• The AI Revolution in Cybersecurity
• HexStrike-AI: A Force Multiplier for Red Teams
• HexStrike AI: Install, Configure, and Run MCP with Gemini, OpenAI, Cursor, Llama
• HexStrike on Kali Linux 2025.4
• HexStrike + Gemini vs. HackerAI
• The 20x Employee

Hands-on AI-assisted pentesting workflows for network discovery, web apps, wireless, SMB/SSH, password recovery, cloud scanning, and lab exploitation.

• AI-Driven Pentesting at Home
• AI-Driven Web Application Pentesting with HexStrike-AI
• AI-Driven Wireless Penetration Testing
• HexStrike + Cursor full subnet compromise
• AI-Assisted Web and Cloud Penetration Testing
• StratusAI

Burp Suite, scanner interpretation, MCP integrations, payload planning, and classic web scanner guides.

• Getting More from Burp Suite with LLMs
• Burp Suite MCP + Gemini CLI
• Mastering Burp Suite Vulnerability Scanner
• Cracking Web Interfaces with Burp Suite

Target discovery, Shodan, Censys, theHarvester, Sublist3r, Amass, SpiderFoot, WhatWeb, and LLM-assisted recon planning.

• Nmap Meets ChatGPT
• Shodan
• theHarvester
• Sublist3r
• OWASP Amass
• SpiderFoot
• Censys
• WhatWeb

Nmap fundamentals, service detection, version probing, scripts, scan strategy, and network assessment syntax.

• Mastering Nmap Part 1
• Mastering Nmap Part 2
• Mastering Nmap Part 3
• Mastering Nmap Part 4: Scripts

Traditional web testing with OWASP ZAP, SQLMap, DirBuster, Nikto, and staged reconnaissance-to-scanning methodology.

• OWASP ZAP
• SQLMap Part 1
• SQLMap Part 2
• DirBuster
• Nikto
• Web App PT Stage 1
• Web App PT Stage 2

Metasploit foundations, auxiliary modules, exploit modules, and practical SSH/FTP/Telnet exploitation workflows.

• Metasploit Part 1
• Auxiliary modules
• Exploit modules
• SSH exploitation
• FTP exploitation
• Telnet cracking

John the Ripper, Hashcat, Hydra, WiFi cracking, PDF/Office/ZIP recovery, RDP, RTSP, and custom wordlist generation.

• John the Ripper
• Hashcat
• Hydra
• Aircrack-ng
• PDF cracking
• Office document cracking
• RTSP brute force
• Personal Pass Generator

AD penetration testing, ADCS ESC8, certificate abuse, lab deployment, and MITRE ATT&CK tool mapping for red teams.

• Active Directory Penetration Testing
• ADCS ESC8
• AD lab in Cursor AI
• Tools by MITRE ATT&CK

GCP pentesting, vulnerable cloud labs, Kubernetes lab design, black-box K8s playbooks, and cloud-native detection.

• GCP Pentesting
• Vulnerable GCP lab
• Vulnerable cloud lab
• Vulnerable Kubernetes lab
• Black-box Kubernetes PT
• Cloud-native security

Vulnerable Ubuntu and Windows labs, IIS/SharePoint lab, DVWA automation, DragonRx, vulnerable AI lab, and one-prompt training environments.

• Vulnerable Ubuntu lab
• Vulnerable Windows lab
• IIS SharePoint lab
• DVWA with Ansible
• Vulnerable AI Lab
• Operation DragonRx

Static malware analysis, file metadata, strings, obfuscation, automated triage tools, Android APK analysis, and AI-assisted forensics.

• Android APK Analysis Tool
• AIDebug
• Static Malware Analysis
• File Fingerprinting
• Strings Analysis
• Obfuscation
• Digital Forensics with AI

Endpoint hunting, protocol-level hunting, Pyramid of Pain, single-event and correlation detection rules, and CI/CD defense.

• Endpoint Threat Hunting
• Wireshark threat hunting
• Pyramid of Pain
• Single-event detection
• Correlation detection
• CI/CD defense

Building security tools and payload workflows with Cursor AI, including Android Rubber Ducky payloads and Arduino Leonardo hardware builds.

• Android Rubber Ducky payloads in Cursor AI
• USB Rubber Ducky with Arduino Leonardo

SOC Tier 1 onboarding, awareness, phishing protection, OWASP Top 10 secure coding, server hardening, and baseline PT toolkits.

• SOC Tier 1 onboarding
• Information Security Awareness
• Phishing awareness
• OWASP Top 10
• Server hardening
• Basic PT toolkit

Fluent Bit, AWS EKS log shipping, Kubernetes DaemonSets, EKS control-plane logs, XPLG integration, and Linux reporting tools.

• Fluent Bit Windows service
• Fluent Bit on AWS EKS
• Fluent Bit Kubernetes DaemonSet
• EKS logs to XPLG
• syscheck_beauty

Feedback, future topic requests, and meta-navigation material for the blog.

• What Do You Want to Read?